CVE-2026-15497

Name of the Vulnerable Software and Affected Versions SonicCloudOrg sonic-agent versions prior to 2.7.3

Description A code injection flaw exists within the JWT Authentication Filter component, specifically affecting the ExchangeController.java file. This issue allows a remote attacker to inject and execute arbitrary code. The flaw is present in products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.